Known vulnerabilities in the Userpro plugin
14 security advisories have been published for the Userpro plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Userpro - Privilege Escalation (CVE-2024-9863) CRITICAL
- Userpro - Security Vulnerability (CVE-2024-0701) MEDIUM
- Userpro - Cross-Site Scripting (XSS) (CVE-2023-2439) MEDIUM
- Userpro - Privilege Escalation (CVE-2023-6009) HIGH
- Userpro - Broken Access Control (CVE-2023-6007) HIGH
- Userpro - Cross-Site Request Forgery (CSRF) (CVE-2023-6008) MEDIUM
- Userpro - SQL Injection (CVE-2023-2449) CRITICAL
- Userpro - Authentication Bypass (CVE-2023-2437) CRITICAL
- Userpro - PHP Object Injection (CVE-2023-2497) HIGH
- Userpro - Cross-Site Request Forgery (CSRF) (CVE-2023-2440) HIGH
- Userpro - Information Disclosure (CVE-2023-2448) MEDIUM
- Userpro - Cross-Site Request Forgery (CSRF) (CVE-2023-2438) MEDIUM
- Userpro - Information Disclosure (CVE-2023-2446) MEDIUM
- Userpro - Cross-Site Request Forgery (CSRF) (CVE-2023-2447) MEDIUM